Various fixes not only towards testssuit working under FIPS mode

This is compilation of recent branch from Andreson: https://gitlab.com/ansasaki/libssh-mirror/commits/fips with several more improvements for the tests stability and fixed code issues that I ran through during the work.

What is still failing in FIPS is the torture_auth tests using SHA2 certificates (is fixed by !34 (closed) and fix in OpenSSH) and pkd tests (quite heavily dependent on DSA and ED25519 keys which I was not able to compile out).

Some of the commits are really independent and should be applied regadless the FIPS, such as

  • 374fad54 - bug in gcrypt ecdsa key comparison
  • a717a440 - bogus newlines in log messages
  • 6cadbb67 - list certificate types in the algorithm negotiation
  • !32 (closed) (also in separate PR) removing duplicate items from knownhosts lists

Merge request reports

Loading